Protecting your people shouldn't put their data at risk. KeenSec is SOC 2 Type II ready and DPDP-ready, hosts your data in-region, and your data never trains AI models.
Every protective layer is documented, so your team can review it instead of taking our word for it.
Controls, policies, and operational processes are prepared toward a future SOC 2 Type II examination.
Critical and high-severity vulnerabilities are prioritised and remediated on defined timelines.
Periodic application and infrastructure penetration testing is performed to identify and remediate security weaknesses.
Hosted on enterprise-grade cloud infrastructure with provider-managed physical security, resilient infrastructure, and controlled access to production systems.
Self-service data access, correction and verified erasure for employees.
Direct route to our Data Protection Officer, acknowledged within 72 hours.
Time-synchronised logs, 6-hour incident notification workflows and 180-day log retention.
Tenant-specific keys held in a hardware security module (FIPS 140-3 Level 3).
TLS 1.3 on every public endpoint; mutual TLS between internal services.
Your data never trains AI models, enforced with zero-retention settings.
Reported emails analysed in memory and wiped once the verdict is ready.
How we protect you
Each one is backed by implemented, documented controls.
Your data kept separate, encrypted and access-controlled.
Where your data goes, how long it stays, and what AI never does with it.
Where we host, how we connect, and how we fit your stack.
Audit mappings and exportable records for compliance teams.
Proof you can hand to your auditor.
Control library
Filter or search to see how each control works and what it maps to.
Data residency
In-region hosting options keep your data where your regulators expect it, aligned with CERT-In directions and the DPDP Act 2023.
Reported emails arrive in-region, with no external hops.
TLS 1.3 / mTLSAnalysed in memory. Nothing written to disk or sent to third-party models.
Zero RetentionResults stored in-region, encrypted with your own key.
AES-256-GCM EnvelopeEvents stream to your SIEM over encrypted webhooks or VPC peering.
Private NetworkingAvailability
A clear line between generally available features and enterprise-dedicated options.
| Capability Area | Availability | Deployment Scope | Compliance & Readiness |
|---|---|---|---|
| Multi-Channel Attack Simulation Email, SMS & RCS, voice (IVR & agentic AI), WhatsApp, Microsoft Teams and Slack, plus QR, calendar, browser ransomware, attachment and credential attacks | Generally Available | In-Region Cloud & Dedicated Tenants | SOC 2 Type II Ready · In-Region Hosting |
| Employee Reporting & Analysis One click in the inbox your people already use, checked against multiple threat-intelligence and reputation sources | Generally Available | Mail Add-In + In-Region Backend | SOC 2 Type II Ready · Zero Data Persistence |
| Human Cyber Risk Intelligence Risk patterns by team, channel and department | Generally Available | Tenant Console & SIEM Feeds | DPDP Ready · Role-Based Access |
| Targeted Awareness & Learning Video, micro-learning, assessments, guided learning, certificates and just-in-time lessons | Generally Available | Integrated LMS / In-Line Browser Delivery | SCIM v2.0 Sync · NIST SP 800-50 Rev. 1 Aligned |
| Policy Manager Distribute policies, collect acknowledgements, automate reminders and escalations | Generally Available | Tenant Console | SCIM v2.0 Sync · NIST SP 800-50 Rev. 1 Aligned |
| AI Studio Scenarios, landing pages and lessons, reviewed by a human | Generally Available | Tenant Console | SCIM v2.0 Sync · NIST SP 800-50 Rev. 1 Aligned |
| KeenSec AI Threat Explanation Plain-language verdicts with evidence and confidence | Generally Available | Isolated AI Gateway | Zero Model Training Guarantee |
| Enterprise SSO & Directory Sync SAML 2.0 / OIDC with automatic joiner and leaver sync | Generally Available | Directory & SSO Integration | SOC 2 CC6.3 · Mandatory MFA |
| VPC Peering & Private Connectivity Traffic kept off the public internet | Enterprise Dedicated | Customer Virtual Private Cloud | Network Isolation · Custom KMS BYOK |
Available to qualified security teams, auditors and CISOs under mutual NDA.
Let’s connect the dots
Bring your awareness program, your reporting workflow, or the question your current metrics cannot answer.
Book a demo